Recent Articles

Containerizing an application and deploying to Kubernetes Engine on Google Cloud Platform

For last weekend's coding exercise, I played around with Kubernetes Engine on Google Cloud Platform.
GCP offers a nice trial period where you get USD300 worth of credits on top of the already free
monthly resource allotments. Definitely …

Ubuntu, DKMS and Secure Boot

Starting with Ubuntu 16.04, the kernel will refuse to load unsigned
modules. This is pretty reasonable from a security point of view; a
chain of trust is established starting from a set of keys in the system
ROM. The kernel will refuse any unsigned …

Hardening Wifidog

Wifidog run as root and that's bad. The omnipotent superuser
allows Wifidog to do absolutely everything on (and to) the system. An
attacker who is able to remotely execute arbitrary code
can easily take over the whole system.

Wifidog and the dreaded memory leaks

I've recently made quite a few contributions to the
wifidog project. It has
been a lot of fun to see the project coming back to life after being almost
dormant for the last couple of years. Now the bug tracker on Github is fuller …